Rule ID
SV-259002r934664_rule
Version
V1R1
CCIs
Tomcat provides host management functionality through either a default host-manager webapp or through local editing of the configuration files. The host-manager webapp files must be deleted, and administration must be performed through the local editing of the configuration files.
At the command prompt, run the following command: # ls -l /var/opt/apache-tomcat/webapps/host-manager If the manager folder exists or contains any content, this is a finding.
At the command prompt, run the following command: # rm -rf /var/opt/apache-tomcat/webapps/host-manager